Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5dktwpt3QEXn3oCWzptfJ1LzPKRHmKnKnkorK17yYjj/1/3136382e3139372e3135362e302f32332d3233203d3e20323635343835.roa
File: 3136382e3139372e3135362e302f32332d3233203d3e20323635343835.roa (raw, json)
Hash identifier: Bcj+cezIBa5IU7SOP+QHr4o3rAckGafDiMQS0vkPg6s=
Subject key identifier: 19:1F:A3:82:27:38:6C:D8:0E:89:E7:0A:17:D8:40:5D:CA:A9:55:F4
Certificate issuer: /CN=F0C10BCB9F02D8247AA02A3EDEA94DD4B3B99EBE
Certificate serial: 30AC66C22C94FE05B42B3FC909C71576B3731E81
Authority key identifier: F0:C1:0B:CB:9F:02:D8:24:7A:A0:2A:3E:DE:A9:4D:D4:B3:B9:9E:BE
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0C10BCB9F02D8247AA02A3EDEA94DD4B3B99EBE.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5dktwpt3QEXn3oCWzptfJ1LzPKRHmKnKnkorK17yYjj/1/3136382e3139372e3135362e302f32332d3233203d3e20323635343835.roa
Signing time: Fri 07 Mar 2025 14:41:02 +0000
ROA not before: Fri 07 Mar 2025 14:36:02 +0000
ROA not after: Fri 06 Mar 2026 14:41:02 +0000
asID: 265485
IP address blocks: 168.197.156.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:ac:66:c2:2c:94:fe:05:b4:2b:3f:c9:09:c7:15:76:b3:73:1e:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F0C10BCB9F02D8247AA02A3EDEA94DD4B3B99EBE
Validity
Not Before: Mar 7 14:36:02 2025 GMT
Not After : Mar 6 14:41:02 2026 GMT
Subject: CN=191FA38227386CD80E89E70A17D8405DCAA955F4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:4e:ef:cd:7c:1a:3d:b1:80:9e:d8:4d:0c:87:
f4:ec:98:41:39:f3:62:21:34:74:df:30:35:15:3f:
ff:30:96:fe:3a:a7:a9:95:9e:e1:7e:d1:ea:00:99:
2f:24:d0:b5:74:59:d2:bf:db:13:6a:c2:5e:1a:34:
8a:73:3a:e6:97:cd:45:11:e9:80:45:69:b6:49:60:
88:d2:b6:e7:be:ae:33:74:12:53:00:be:70:68:b5:
89:4e:ca:4e:2d:9c:32:b5:a8:3d:74:e2:72:30:05:
59:4d:55:69:c8:a9:d1:4b:99:1f:9c:bc:d9:b8:61:
8f:48:0c:06:88:11:85:57:6d:39:41:b6:70:54:dc:
4d:77:97:4f:64:21:59:2c:13:b6:86:b8:ed:62:8d:
42:dc:1e:3d:9b:9b:63:a1:be:33:c9:72:fc:6d:5a:
c8:80:db:56:cb:4f:32:60:e5:93:b1:68:c5:9e:e5:
a5:7b:50:13:b3:eb:0f:20:fb:4e:70:b6:7e:82:12:
f4:54:42:ea:e8:37:76:8a:b7:e2:ec:63:1f:ea:f1:
8a:ad:e6:9c:6f:b3:e5:be:1b:29:1b:c1:a4:21:29:
9d:71:c8:dc:47:d1:c6:65:8a:3c:63:66:32:e3:e4:
3e:6b:8b:f6:fd:12:c6:5d:1e:ba:be:7d:9f:36:2f:
12:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:1F:A3:82:27:38:6C:D8:0E:89:E7:0A:17:D8:40:5D:CA:A9:55:F4
X509v3 Authority Key Identifier:
keyid:F0:C1:0B:CB:9F:02:D8:24:7A:A0:2A:3E:DE:A9:4D:D4:B3:B9:9E:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5dktwpt3QEXn3oCWzptfJ1LzPKRHmKnKnkorK17yYjj/1/F0C10BCB9F02D8247AA02A3EDEA94DD4B3B99EBE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0C10BCB9F02D8247AA02A3EDEA94DD4B3B99EBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5dktwpt3QEXn3oCWzptfJ1LzPKRHmKnKnkorK17yYjj/1/3136382e3139372e3135362e302f32332d3233203d3e20323635343835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.197.156.0/23
Signature Algorithm: sha256WithRSAEncryption
c1:55:98:14:8f:12:c0:88:e2:f3:6f:d1:65:4b:6a:30:6c:ee:
99:d6:c6:6e:99:07:a7:b6:0e:7f:c8:de:e7:1b:c0:ea:00:67:
63:a0:7f:d7:ec:2d:c5:7a:9b:c3:e9:56:b8:9e:84:74:01:66:
93:c6:76:74:4c:2b:36:10:90:17:24:6f:f3:e9:d9:f9:14:80:
99:b1:5e:b2:c2:ee:3e:c8:76:3d:ea:be:82:74:a7:1a:25:86:
32:e1:70:d6:cc:3d:a4:fb:c2:fb:ed:9a:28:65:20:d4:52:5a:
31:b4:db:e1:69:9d:13:49:ca:5d:26:c4:f2:b5:55:db:c3:01:
ee:0c:9a:f1:53:1d:32:7f:15:df:61:c5:d3:66:10:e3:21:20:
46:46:c9:9a:37:ce:c4:3c:d2:dc:f1:c9:60:0d:34:e7:18:cd:
86:57:e3:51:a1:2d:8a:76:5a:f5:33:04:a8:a1:f2:56:7a:37:
44:b9:fd:7d:14:1d:5c:59:bc:30:c1:57:f1:f4:78:33:92:fc:
3d:29:81:2b:e6:d9:e3:21:c2:e0:10:ba:dc:8b:d6:e9:58:5e:
f0:a4:09:f9:cf:3d:a5:45:0b:7d:ac:cd:c8:a2:2c:df:da:d7:
af:19:cd:0e:d9:bc:ba:3c:5f:f3:dc:31:37:54:3b:df:27:bf:
4a:ef:14:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:47:47 2025 by rpki-client